Web access grinds to a Halt with DNS

Hi
I have an issue on two site sites now so I know it is something I have or have not done.
Running OD and DHCP and DNS
10.5.3 but was happening on 10.5.2
The clients first port of call is the server itself for DNS requested then external. In the DHCP setup it dishes out the ip address of the server first then the external DNS.
The web access gets slower and slower then stops and then after about 2 mins speeds up again. the router is the same as before and the only thing that has changed is the DNS setup.
help please as I have two unhappy servers.
only two mobile accounts running so not overloading it. G5 dual 2.8ghz with 4gb ram
many thanks
Duncan

Hi Charles!
First you have no idea what a life saver you will be for me this weekend! I am in LA and the client is in NYC (working remotely obviously) and I've managed to mess things up a bit more since my last post.
One issue I had with changing the port order is that I loose connectivity to the server and then cannot reboot -- I had my business partner in NYC there to do that for me but he is now gone for the day. Is there a way to avoid this problem? Also, just FYI, I had my partner leave the install DVD in the Xserve drive just in case I needed to do a complete reinstall.
Now I will also try to answer your questions as best I can:
Has the server been set up as an Open Directory Master yet?
Yes it has.
Hopefully it says dc=server,dc=businessname,dc=pri If not or if it says something like dc=<bonjour-servername>,dc=local.
It says:
dc=server,dc=businessname,dc=pri
Hopefully you haven't already created a bunch of users in Work Group Manager in the LDAP domain
I have set up users in Work Group Manager but I can easily re-create them. In fact one issue is that they cannot login to AFP services (after I started messing around today), getting SACL membership failures.
Have you already run the Gateway setup assistant
I haven't yet but the person that first set up the server may have way back when.
From your posting I'm assuming the clients will be using internal IP addresses in the 10.10.10.(2-254) range. Correct?
DHCP clients are currently set in the .100 - .200 range.
Is this server going to also be the DHCP server for the subnet?
Please forgive my ignorance but I don't (I know I should) understand the question. Can you explain?
What all services will this server be providing for the internal network?
They are: AFP, DHCP, DNS, Firewall (which I'm sure could be better configured), FTP, NAT, OD, SMB and VPN.
Currently, all clients can access the Internet though cannot access the Server itself (again, probably due to my mucking around today) via AFP or SMB. I do, however still have VPN access.
Also, FYI, apparently a virtual port was configured also on en0 (I believe the Virtual port was there because at one point both the new and old server were active at the same point and the port forwarded requests to the new server so that we didn't have to change anything on the client side). Anyway, here is the System Profile for both ports on en0:
Ethernet 1:
Type: Ethernet
Hardware: Ethernet
BSD Device Name: en0
IPv4 Addresses: 10.10.10.1
IPv4:
Addresses: 10.10.10.1
Configuration Method: Manual
Interface Name: en0
Router: 10.10.10.1
Subnet Masks: 255.255.255.0
IPv6:
Configuration Method: Automatic
AppleTalk:
Configuration Method: Node
Default Zone: *
Interface Name: en0
Network ID: 65394
Node ID: 146
DNS:
Search Domains: businessname.pri
Server Addresses: 10.10.10.1
Proxies:
Exceptions List: *.local, 169.254/16
FTP Passive Mode: Yes
Ethernet:
MAC Address: 00:00:00:00:fa
Media Options: Half Duplex
Media Subtype: 100baseTX
AND (in the 3rd slot in Network System Prefs pane):
Ethernet 1:
Type: Ethernet
Hardware: Ethernet
BSD Device Name: en0
IPv4 Addresses: 10.10.10.1
IPv4:
Addresses: 10.10.10.1
Configuration Method: Manual
Router: 10.10.10.1
Subnet Masks: 255.255.255.0
IPv6:
Configuration Method: Automatic
DNS:
Search Domains: businessname.pri
Server Addresses: 10.10.10.1
Proxies:
Exceptions List: *.local, 169.254/16
FTP Passive Mode: Yes
Ethernet:
MAC Address: 00:00:00:00:00:fa
Media Options: Half Duplex
Media Subtype: 100baseTX
Thanks again for all of your help!
Best,
Alan

Similar Messages

I have the top of the range MacBook Pro. Yet every time I open iPhoto it grinds to a halt with iPhoto crashing 1 out of every 4 times I open it. Is this normal? And if not how can I fix it?

I have the top of the range MacBook Pro (but not the latest one with the Retina display). Yet every time I open iPhoto it grinds to a halt with iPhoto crashing 1 out of every 4 times I open it. Is this normal? And if not how can I fix it? I have 55k photo's.

No it's not normal. What version of iPhoto? Post the first 50 lines only of the crash report
Regards
TD

TFS 2012 - WI Query in TFS Web Access - History field contents appear with html tags presented as text

When History field is selected as a column to be displayed in a WI query result, its contents are displayed with the HTML tags as if they where text, e.g. contents ...
This occurs when query is run in web access contents in IE and when result is sent via email from within TFS (there's a button for this purpose).
However, in Visual Studio 2012 the same History Column contents are shown without the tags, as one would expect.
Furthermore, when one clicks on Open In Microsoft Office, for this query results in VS, and selects result in Excel, the History column in the Excel appears empty.
The only way we found to bypass this issue for now, it to mark all the query result lines in VS, and right click for "print selected list..." to a virtual PDF printer. This way the result looks reasonably ok when History field is included.
Kindly advise, Thank u very much.

Hi Moital,
Thanks for your post.
As far as I know history content will display with the HTML tags if there’s multiple lines in content, and History content not support show in Excel, that’s by design in TFS Server.
As Clementino said, you can submit this scenario in connect site, Microsoft engineers will evaluate them seriously.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Remote Web Access (remote desktop gateway) issue with WHS2011

I have been using Remote Web Access on my Windows Home Server 2011 for several years with no problems. Over the past several weeks, though, I have been receiving an error when I try to connect to a computer through WHS's Remote Web Access:
"...the Remote Desktop Gateway is temporarily unavailable." Interestingly, when I try to connect from a Windows 8.1 computer, I just get a dialog box that says "Initiating connection," but the connection is never established. I cannot
find any relevant errors in any of the event logs.
I have read numerous articles relating to WHS configuration and port forwarding, but these do not have any information that addresses my situation. I have ports 4125, 80, and 443 forwarded to my Home Server. As I said, everything has been working fine with
this configuration until several weeks ago -- I suspect it might have something to do with a .NET Framework 4.5 update that was recently installed (and that has now been uninstalled), but that is the only change I can think of.
Any help would be greatly appreciated! Thanks!

Hi,
As you have commented that after installing .Net framework you are facing this issue. So after uninstalling still you are facing the same issue. Apart from installing .Net framework 4.5, have you installed or done any other change on your server?
Here you can check that “Remote Gateway Service” is running. Please check and restart the service if it’s stop. Apart you can check below 2 article for more detail step.
1. Can’t connect to the remote computer because the Remote Desktop Gateway server is temporarily unavailable error via SBS 2011
2. This computer can't connect to the remote computer because the Terminal Services Gateway server is temporarily unavailable (Try to perform the steps as suggested for
WHS 2011)
Hope it helps!
Thanks,
Dharmesh

Publish RD Gateway and Web Access with One-Time Password (OTP) / Two-factor Authentication WITHOUT ISA/TMG server

Hi everybody,
I've been struggeling with this problem for a few weeks now and can't find a way to solve it.
We have an RD farm (Server 2012) which consists of two Remote Desktop Servers with Connection Broker and Web Access.
I've recently published a new server, containing RD Gateway and Web Access in our perimeter network.
Now we've got restrictions that OTP/2FA must be used for the external deployment and we've decided to go for a solution from Gemalto.
The "program" is called IDConfim and the server is called SA Server (Strong Authentication).
Also it's important that NO ISA/TMG server is supposed to be used, the OTP/2FA is supposed to work seamless with the Web Access/Gateway.
After hours discuss we came to a point were their NPS agent setup would be the only way to accomplish our goals.
The setup is supposed to be like this:
LAN:
1 DC (2008 R2)
RD Farm (2012)
1 SA Server (2012)
DMZ:
RD Gateway/Web Access (2012)
Were Gateway and Web Access should forward the authentications with NPS to the NPS agent on the SA server.
When you print your AD account to authenticate you add the 6 digits of OTP which you recieve from you mobile app.
Initially this seems to work, the Gateway forwards the request to the remote NPS server, BUT only if you write the correct AD password
(without the OTP extension).
If you write the correct AD password the authentication is forwarded to out SA Servern and it's beeing rejeced because the password doesn't
contain the correct OTP extension.
The problem comes here.
When you write you AD password along with the OTP extension you get a Windows Security error in the eventlog (On thw Gateway server) like this:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: user
Account Domain: domain
Failure Information:
Failure Reason: Unknown username or password.
Status: 0xc000006d
Sub Status: 0x0
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: server
Source Network Address: 192.168.x.x
Source Port: 63003
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
What i can see it's a NTLM error, but hey?! aren't we supposed to forward all authentication handeling to the remote NPS server?
The problem is that no matter what i try the above problem stays there.
Is it not possible to just forward ALL authentication handeling to a remote server?
The only solution I've found to get it working someday in the future is this:
"Remote Desktop Pluggable Authentication and Authorization", which is supposed to be introduced in 2012 R2.
Also this link describes it:
http://archive.msdn.microsoft.com/Release/ProjectReleases.aspx?ProjectName=rdsdev&ReleaseId=3745
Please, bring me some answers before my head explodes! :)
PS, long question = maybe some errors, ask me if something is unclear.

Hi,
Based on our experience, if the NTLM error occurs, please check the password.
Regards,
Mike
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Problems with Microsoft Office Outlook Web Access and any web browser

My university e-mail goes through Microsoft Office Outlook and I access it through the Web Access.
I have tried with 3 browsers (Chromium, Firefox and Gnome's Web, and with all of them I am getting the same problems.
Basically, once I log in, the css seems to be screwed sometimes (not always). I click in a e-mail to read it, and it does nothing (not always), I write an e-mail, click send, and it gives me a white screen error (not always), and then it is not even saved as draft.
I have this errors like 70% of the time, or more, which means that every time I want just to read an e-mail, I spend 5 minutes reloading the website, singing out, clearing cookies,... until eventually all seems to load correctly.
No idea how I can fix this, or how I can get this to work.
thank you!

The light version is set by default, and I cannot choose the non-light.
I assume it makes some kind of "webbrower check id", and mine sends whatever linux like id, which the server doesn't recognize, and it screwes me

Rotating the default-web-access.log log

Can the default-web-access.log file be rotated with ODL?

Yes, at least since on 10g Release 2 (10.1.2) , see the <odl-access-log> secction on:
Oracle® Application Server Containers for J2EE User's Guide
10g Release 2 (10.1.2) - 3 Advanced Configuration and Development
http://download-west.oracle.com/docs/cd/B14099_19/web.1012/b14011/advanced.htm
Bruno Antunes,
Java Software Engineer

I teach at an online university. We use Office Web Access at the University. Using OWA, Internet Explorer offers me options (like searching old emails) that MF doesn't provide. Why is this?

To repeat, MF seems to offer fewer options at this university when I use Office Web Access.

Hi guys,
I talked with the team about this on Friday last week, I'm sorry we haven't gotten back to you sooner.
Our initial recommendation would be to recompile your application to use HTMLLoader. While StageWebView uses the OS web rendering engine, the HTML control still uses the built in webkit. However, I realize that you might not have access to the original code, be unable to distribute an update, etc.
Our intent with this change was to have StageWebView use a light weight interface to the OS rendering engine. We wanted you to have the best performance possible with the most up to date security. There were other issues we were also trying to tackle, such as decarbonizing on Mac that also influenced our decision.
All that said, we get where you are coming from, especially with Windows. I don't think it would be unreasonable to have an api that would allow you to choose if you want StageWebView to use the internal webkit or the OS version. Maybe the default would be to use the internal webkit so that older apps aren't impacted. This would be a great bug report / feature request. Getting comments and votes from other developers would also allow us insight into who is using this feature and has been effected by our changes.
If you'd like to enter a bug, please let me know the bug number and I'll take it to the team for review.
Thanks,
Chris

Hoe to redirect RD gatway to RD web access Server

Hi
i have already one W2008 server with All RD services but not RD gatway. i have just installed RD GW on W2012. i opend the 443 port on Firewall and i can connect from externl to it.
the question now : how to set the RD GW to rediret any request from client to the Web acces installed on the other server ?
Many thanks for Help

Hi,
Thank you for your comment.
RD Web Access server needs to communicate with your RDSH server to retrieve the list of RemoteApp program. RDWeb server computer account needs to be a member of the local RD Web Access Computer group on your RDSH server. The client PC also needs to trust the
certificates it receives from RDWeb, RD Gateway, RDSH, etc. In RemoteApp Manager on your RDSH server please configure the FQDN of your RD Gateway server.
You can check below link, which might get useful for your case.
Windows Server 2012: Manage your RDS with RDMS
http://technet.microsoft.com/en-us/magazine/dn235779.aspx
Configure the RD Web Access Server for RemoteApp and Desktop Connection
http://technet.microsoft.com/en-us/library/dd759250.aspx
Configuring RD web access for public/external access
http://social.technet.microsoft.com/Forums/windowsserver/en-US/4396d3e9-2ac5-4d0b-baba-25471498a349/configuring-rd-web-access-for-publicexternal-access?forum=winserverTS
Hope it helps!
Thanks,
Dharmesh

A problem with Win 7 Pro, Outlook Web Access based on Exchange Server 2003, and two different domains

Dear Microsoft Support,
As mentioned in the title,
I have two domains. One is Domain A at HQ. The other one is Domain A at branch office. A laptop having Win 7 Pro OS is a client of Domain A. The Domain A has Exchange Server 2003. Users of Domain B get connected to Exchange Server for email services. In
all clients of the Domain B, IP address of the email server added in C:\Windows\System 32\drivers\etc\host file.
Whereas in the clients of Domain A it was not done, because all the servers including the email server belong to the Domain A.
Now, a user with Domain A's client (it is a laptop) came to Branch office and wanted to access the Outlook (using Outlook Web Access). since there is no IP address added in the Host file of the laptop, connectivity to email is not possible. When I try to
add the IP address, I was not able to do so due to Domain A's security reasons.
So, let me know, is there a way out to add the IP address in the host file of the Domain A's client.
Thanks in advance.
Ravi Sekhar Modukuru

I would suggest adding the mailserver address in Domain B's DNS. Would that be possible?
I agree. The correct solution in this case (since it appears you already have a two-way Domain Trust in place) is to properly configure DNS in Domain 'B' to be a secondary of Domain 'A' and completely eliminate the need to maintain the HOSTS file.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

BlackBerry Internet Service with Microsoft Outlook Web Access account

I need to switch my 8820 to a new work account. They use Outlook Exchange 2003, but do not support BES. I have access via both regular desktop Outlook and also Outlook Web Access (from a different server). I read the procedure to use BIS in KnowledgeBase KB03133. After entering my email address and password, I get a message that it was successfully set up. But, I get no e-mail messages delivered. When I check the settings, it looks like it is not using the correct server for Web Access. However, I can find no way to manually enter it - I don't get the error message described in Step 5 where I can pick "I will provide the settings." I try to set up via computer but I get a message that my BIS cannot be accessed via HTML and need to set up on my BB.
Any suggestions? Would it work with a newer phone running a newer OS? Do I need to check with AT&T if it supports Outlook Web Access? Thanks in advance.

Hi and Welcome to the Forums!
Lot's of possible variables...here a several other KBs to try:
KB03133How to integrate a Microsoft Outlook Web Access email address with a BlackBerry Internet Service account
KB18567BlackBerry Internet Service cannot connect to a Microsoft Outlook Web Access account using Microsoft Exchange 2007 or Microsoft Exchange 2010
KB15173Locate the mailbox name for a Microsoft Outlook Web Access 2007 email account
KB04804Error message appears when attempting to integrate a Microsoft Outlook Web Access 2010 account
KB02858Unable to integrate a Microsoft Outlook Web Access email address with a BlackBerry Internet Service account
The trick to getting to the manual settings screen is to provide your valid email address, but an incorrect password...then, it will allow you to manually enter the settings.
Good luck!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Fix many web access problems with IFS 9.0.1 on Solaris (and other OS's)...

When the installation is done according to the documentation,
web access does not work because the scripts that add entries to
the jserv.properties file add duplicate references to
wrapper.env and wrapper.classpath. Look at the jserv.properties
file below and look at the remarked-out (#) lines of the
duplicate references. For example, look at the references to the
wrapper.env=LD_LIBRARY_PATH
Oracle, please note this bug so the web access problems are
minimized when the product is intstalled.
Thank you,
William T.
# Apache JServ Configuration
File #
################################ W A R N I N G
# Unlike normal Java properties, JServ configurations have some
important
# extensions:
# 1) commas are used as token separators
# 2) multiple definitions of the same key are concatenated in
a
# comma separated list.
# Execution parameters
# The Java Virtual Machine interpreter.
# Syntax: wrapper.bin=[filename] (String)
# Note: specify a full path if the interpreter is not visible in
your path.
wrapper.bin=/d3/Apache/jdk/bin/java
# Arguments passed to Java interpreter (optional)
# Syntax: wrapper.bin.parameters=[parameters] (String)
# Default: NONE
wrapper.bin.parameters=-Xms64m
wrapper.bin.parameters=-Xmx128m
# Apache JServ entry point class (should not be changed)
# Syntax: wrapper.class=[classname] (String)
# Default: "org.apache.jserv.JServ"
# Arguments passed to main class after the properties filename
(not used)
# Syntax: wrapper.class.parameters=[parameters] (String)
# Default: NONE
# Note: currently not used
# PATH environment value passed to the JVM
# Syntax: wrapper.path=[path] (String)
# Default: "/bin:/usr/bin:/usr/local/bin" for Unix systems
# "c:\(windows-dir);c:\(windows-system-dir)" for Win32
systems
# Notes: if more than one line is supplied these will be
concatenated using
# ":" or ";" (depending wether Unix or Win32) characters
# Under Win32 (windows-dir) and (windows-system-dir) will
be
# automatically evaluated to match your system
requirements
# CLASSPATH environment value passed to the JVM
# Syntax: wrapper.classpath=[path] (String)
# Default: NONE (Sun's JDK/JRE already have a default classpath)
# Note: if more than one line is supplied these will be
concatenated using
# ":" or ";" (depending wether Unix or Win32) characters.
JVM must be
# able to find JSDK and JServ classes and any utility
classes used by
# your servlets.
# Note: the classes you want to be automatically reloaded upon
modification
# MUST NOT be in this classpath or the classpath of the
shell
# you start the Apache from.
wrapper.classpath=/d3/Apache/jdk/lib/tools.jar
wrapper.classpath=/d3/Apache/Jserv/libexec/ApacheJServ.jar
wrapper.classpath=/d3/Apache/Jsdk/lib/jsdk.jar
# An environment name with value passed to the JVM
# Syntax: wrapper.env=[name]=[value] (String)
# Default: NONE on Unix Systems
# SystemDrive and SystemRoot with appropriate values on
Win32 systems
wrapper.env=PATH=/d3/bin
# An environment name with value copied from caller to Java
Virtual Machine
# Syntax: wrapper.env.copy=[name] (String)
# Default: NONE
# Uncomment the following lines to set the default locale and
NLS_LANG
# setting based on the environment variables.
# wrapper.env.copy=LANG
# wrapper.env.copy=NLS_LANG
# Copies all environment from caller to Java Virtual Machine
# Syntax: wrapper.env.copyall=true (boolean)
# Default: false
# Protocol used for signal handling
# Syntax: wrapper.protocol=[name] (String)
# Default: ajpv12
# General parameters
# Set the default IP address or hostname Apache JServ binds (or
listens) to.
# If you have a machine with multiple IP addresses, this address
# will be the one used. If you set the value to localhost, it
# will be resolved to the IP address configured for the locahost
# on your system (generally this is 127.0.0.1). This feature is
so
# that one can have multiple instances of Apache JServ listening
on
# the same port number, but different IP addresses on the same
machine.
# Use bindaddress=* only if you know exactly what you are doing
here,
# as it could let JServ wide open to the internet.
# You must understand that JServ has to answer only to Apache,
and should not
# be reachable by nobody but mod_jserv. So localhost is usually a
# good option. The second best choice would be an internal
network address
# (protected by a firewall) if JServ is running on another
machine than Apache.
# Ask your network admin.
# "*" may be used on boxes where some of the clients get
connected using
# "localhost"and others using another IP addr.
# Syntax: bindaddress=[ipaddress] or [localhost] or [*]
# Default: localhost
bindaddress=localhost
# Set the port Apache JServ listens to.
# Syntax: port=[1024,65535] (int)
# Default: 8007
port=8007
# Servlet Zones parameters
# List of servlet zones Apache JServ manages
# Syntax: zones=[servlet zone],[servlet zone]... (Comma
separated list of String)
# Default: NONE
zones=root
# Configuration file for each servlet zone (one per servlet zone)
# Syntax: [servlet zone name as on the zones list].properties=
[full path to configFile]
(String)
# Default: NONE
# Note: if the file could not be opened, try using absolute
paths.
root.properties=/d3/Apache/Jserv/etc/zone.properties
# Thread Pool parameters
# Enables or disables the use of the thread pool.
# Syntax: pool=true (boolean)
# Default: false
# WARNING: the pool has not been extensively tested and may
generate
deadlocks.
# For this reason, we advise against using this code in
production environments.
pool=false
# Indicates the number of idle threads that the pool may contain.
# Syntax: pool.capacity=(int)>0
# Default: 10
# NOTE: depending on your system load, this number should be low
for contantly
# loaded servers and should be increased depending on load
bursts.
pool.capacity=10
# Indicates the pool controller that should be used to control
the
# level of the recycled threads.
# Syntax: pool.controller=[full class of controller] (String)
# Default: org.apache.java.recycle.DefaultController
# NOTE: it is safe to leave this unchanged unless special
recycle behavior
# is needed. Look at the "org.apache.java.recycle" package
javadocs for more
# info on other pool controllers and their behavior.
pool.controller=org.apache.java.recycle.DefaultController
# Security parameters
# Enable/disable the execution of org.apache.jserv.JServ as a
servlet.
# This is disabled by default because it may give informations
that should
# be restricted.
# Note that the execution of Apache JServ as a servlet is
filtered by the web
# server modules by default so that both sides should be enabled
to let this
# service work.
# This service is useful for installation and configuration
since it gives
# feedback about the exact configurations Apache JServ is using,
but it should
# be disabled when both installation and configuration processes
are done.
# Syntax: security.selfservlet=true (boolean)
# Default: false
# WARNING: disable this in a production environment since may
give reserved
# information to untrusted users.
security.selfservlet=true
# Set the maximum number of socket connections Apache JServ may
handle
# simultaneously. Make sure your operating environment has
enough file
# descriptors to allow this number.
# Syntax: security.maxConnections=(int)>1
# Default: 50
security.maxConnections=50
# Backlog setting for very fine performance tunning of JServ.
# Unless you are familiar to sockets leave this value commented
out.
# security.backlog=5
# List of IP addresses allowed to connect to Apache JServ. This
is a first
# security filtering to reject possibly unsecure connections and
avoid the
# overhead of connection authentication.
# <warning>
# (please don't use the following one unless you know what you
are doing :
# security.allowedAddresses=DISABLED
# allows connections on JServ'port from entire internet.)
# You do need only to allow YOUR Apache to talk to JServ.
# </warning>
# Default: 127.0.0.1
# Syntax: security.allowedAddresses=[IP address],[IP Address]...
(Comma
separated list of IP addresses)
#security.allowedAddresses=127.0.0.1
# Enable/disable connection authentication.
# NOTE: unauthenticated connections are a little faster since
authentication
# handshake is not performed at connection creation.
# WARNING: authentication is disabled by default because we
believe that
# connection restriction from all IP addresses but localhost
reduces your
# time to get Apache JServ to run. If you allow other addresses
to connect and
# you don't trust it, you should enable authentication to
prevent untrusted
# execution of your servlets. Beware: if authentication is
disabled and the
# IP address is allowed, everyone on that machine can execute
your servlets!
# Syntax: security.authentication=[true,false] (boolean)
# Default: true
security.authentication=false
# Authentication secret key.
# The secret key is passed as a file that must be kept secure
and must
# be exactly the same of those used by clients to authenticate
themselves.
# Syntax: security.secretKey=[secret key path and filename]
(String)
# Default: NONE
# Note: if the file could not be opened, try using absolute
paths.
#security.secretKey=./etc/jserv.secret.key
# Length of the randomly generated challenge string (in bytes)
used to
# authenticate connections. 5 is the lowest possible choice to
force a safe
# level of security and reduce connection creation overhead.
# Syntax: security.challengeSize=(int)>5
# Default: 5
#security.challengeSize=5
# Logging parameters
# Enable/disable Apache JServ logging.
# WARNING: logging is a very expensive operation in terms of
performance. You
# should reduced the generated log to a minumum or even disable
it if fast
# execution is an issue. Note that if all log channels (see
below) are
# enabled, the log may become really big since each servlet
request may
# generate many Kb of log. Some log channels are mainly for
debugging
# purposes and should be disabled in a production environment.
# Syntax: log=[true,false] (boolean)
# Default: true
log=true
# Set the name of the trace/log file. To avoid possible
confusion about
# the location of this file, an absolute pathname is recommended.
# This log file is different than the log file that is in the
# jserv.conf file. This is the log file for the Java portion of
Apache
# JServ.
# On Unix, this file must have write permissions by the owner of
the JVM
# process. In other words, if you are running Apache JServ in
manual mode
# and Apache is running as user nobody, then the file must have
its
# permissions set so that that user can write to it.
# Syntax: log.file=[log path and filename] (String)
# Default: NONE
# Note: if the file could not be opened, try using absolute
paths.
log.file=/d3/Apache/Jserv/logs/jserv.log
# Enable the timestamp before the log message
# Syntax: log.timestamp=[true,false] (boolean)
# Default: true
log.timestamp=true
# Use the given string as a data format
# (see java.text.SimpleDateFormat for the list of options)
# Syntax: log.dateFormat=(String)
# Default: [dd/MM/yyyy HH:mm:ss:SSS zz]
log.dateFormat=[dd/MM/yyyy HH:mm:ss:SSS zz]
# Since all the messages logged are processed by a thread
running with
# minimum priority, it's of vital importance that this thread
gets a chance
# to run once in a while. If it doesn't, the log queue overflow
occurs,
# usually resulting in the OutOfMemoryError.
# To prevent this from happening, two parameters are used:
log.queue.maxage
# and log.queue.maxsize. The former defines the maximum time for
the logged
# message to stay in the queue, the latter defines maximum
number of
# messages in the queue.
# If one of those conditions becomes true (age > maxage || size
maxsize),# the log message stating that fact is generated and the log
queue is
# flushed in the separate thread.
# If you ever see such a message, either your system doesn't
live up to its
# expectations or you have a runaway loop (probably, but not
necessarily,
# generating a lot of log messages).
# WARNING: Default values are lousy, you probably want to tweak
them and
# report the results back to the development team.
# Syntax: log.queue.maxage = [milliseconds]
# Default: 5000
log.queue.maxage = 5000
# Syntax: log.queue.maxsize = [integer]
# Default: 1000
log.queue.maxsize = 1000
# Enable/disable logging the channel name
# Default: false
# log.channel=false
# Enable/disable channels, each logging different actions.
# Syntax: log.channel.[channel name]=[true,false] (boolean)
# Default: false
# Info channel - quite a lot of informational messages
# hopefully you don't need them under normal circumstances
# log.channel.info=true
# Servlets exception, i.e. exception caught during
# servlet.service() processing are monitored here
# you probably want to have this one switched on
log.channel.servletException=true
# JServ exception, caught internally in jserv
# we suggest to leave it on
log.channel.jservException=true
# Warning channel, it catches all the important
# messages that don't cause JServ to stop, leave it on
log.channel.warning=true
# Servlet log
# All messages logged by servlets. Probably you want
# this one to be switched on.
log.channel.servletLog=true
# Critical errors
# Messages produced by critical events causing jserv to stop
log.channel.critical=true
# Debug channel
# Only for internal debugging purposes
# log.channel.debug=true
#wrapper.classpath=/d3/ord/jlib/ordim.zip
#wrapper.classpath=/d3/ord/jlib/ordhttp.zip
# Oracle XSQL Servlet
wrapper.classpath=/d3/lib/oraclexsql.jar
# Oracle JDBC
wrapper.classpath=/d3/jdbc/lib/classes12.zip
# Oracle XML Parser V2 (with XSLT Engine)
wrapper.classpath=/d3/lib/xmlparserv2.jar
# Oracle XML SQL Components for Java
wrapper.classpath=/d3/rdbms/jlib/xsu12.jar
# XSQLConfig.xml File location
wrapper.classpath=/d3/xdk/admin
# Oracle BC4J
wrapper.classpath=/d3/ord/jlib/ordim.zip
wrapper.classpath=/d3/ord/jlib/ordvir.zip
wrapper.classpath=/d3/ord/jlib/ordhttp.zip
wrapper.classpath=/d3/BC4J/lib/jndi.jar
wrapper.classpath=/d3/BC4J/lib/jbomt.zip
wrapper.classpath=/d3/BC4J/lib/javax_ejb.zip
wrapper.classpath=/d3/BC4J/lib/jdev-rt.jar
wrapper.classpath=/d3/BC4J/lib/jbohtml.zip
wrapper.classpath=/d3/BC4J/lib/jboremote.zip
wrapper.classpath=/d3/BC4J/lib/jdev-cm.jar
wrapper.classpath=/d3/BC4J/lib/jbodomorcl.zip
wrapper.classpath=/d3/BC4J/lib/jboimdomains.zip
wrapper.classpath=/d3/BC4J/lib/collections.jar
wrapper.classpath=/d3/Apache/Apache/htdocs/onlineorders_html
#wrapper.classpath=/d3/Apache/Apache/htdocs/OnlineOrders_html/Onl
ineOrders.jar
# The following classpath entries are necessary for EJBs to run
in IAS or DB when
present
wrapper.classpath=/d3/lib/aurora_client.jar
wrapper.classpath=/d3/lib/vbjorb.jar
wrapper.classpath=/d3/lib/vbjapp.jar
# Oracle Servlet
wrapper.classpath=/d3/lib/servlet.jar
# Oracle Java Server Pages
wrapper.classpath=/d3/jsp/lib/ojsp.jar
# Oracle Util
wrapper.classpath=/d3/jsp/lib/ojsputil.jar
# Oracle Java SQL
wrapper.classpath=/d3/sqlj/lib/translator.zip
# Oracle JDBC
#wrapper.classpath=/d3/jdbc/lib/classes12.zip
# SQLJ runtime
wrapper.classpath=/d3/sqlj/lib/runtime12.zip
# Oracle Messaging
wrapper.classpath=/d3/rdbms/jlib/aqapi.jar
wrapper.classpath=/d3/rdbms/jlib/jmscommon.jar
# OJSP environment settings
#wrapper.env=ORACLE_HOME=/d3
# The next line should be modified to reflect the value of the
SID for your
webserver.
#wrapper.env=ORACLE_SID=cmpdb
#wrapper.env=LD_LIBRARY_PATH=/d3/lib
## Enable the flag below if you are using jdk 1.2.2_05a or above
#wrapper.env=JAVA_COMPILER=NONE
# Advanced Queuing - AQXML
wrapper.classpath=/d3/rdbms/jlib/aqxml.jar
#wrapper.classpath=/d3/rdbms/jlib/xsu12.jar
#wrapper.classpath=/d3/lib/xmlparserv2.jar
wrapper.classpath=/d3/lib/xschema.jar
#wrapper.classpath=/d3/jlib/jndi.jar
wrapper.classpath=/d3/jlib/jta.jar
oemreporting.properties=/d3/Apache/Jserv/oemreporting/oemreportin
g.properties
zones = root, oemreporting
wrapper.classpath=/d3/jlib/share-opt-1_1_9.zip
wrapper.classpath=/d3/jlib/caboshare-opt-1_0_3.zip
wrapper.classpath=/d3/jlib/marlin-opt-1_0_7.zip
wrapper.classpath=/d3/jlib/tecate-opt-1_0_4.zip
wrapper.classpath=/d3/jlib/ocelot-opt-1_0_2.zip
wrapper.classpath=/d3/jlib/regexp.jar
wrapper.classpath=/d3/jlib/sax2.jar
#wrapper.classpath=/d3/jlib/servlet.jar
wrapper.bin.parameters= -DORACLE_HOME=/d3
#wrapper.env=LD_LIBRARY_PATH=/d3/lib32
wrapper.env.copy=DISPLAY
wrapper.bin.parameters=-DORACLE_HOME=/d3
#wrapper.classpath=/d3/lib/vbjorb.jar
#wrapper.classpath=/d3/lib/vbjapp.jar
wrapper.classpath=/d3/classes/classesFromIDLVisi
wrapper.classpath=/d3/jlib/swingall-1_1_1.jar
wrapper.classpath=/d3/jlib/ewtcompat3_3_15.jar
wrapper.classpath=/d3/jlib/ewt-3_3_18.jar
wrapper.classpath=/d3/jlib/share-1_1_9.jar
wrapper.classpath=/d3/jlib/help-3_2_9.jar
wrapper.classpath=/d3/jlib/ice-5_06_3.jar
wrapper.classpath=/d3/jdbc/lib/classes111.zip
wrapper.classpath=/d3/classes
wrapper.classpath=/d3/jlib/oembase-9_0_1.jar
wrapper.classpath=/d3/jlib/oemtools-9_0_1.jar
wrapper.classpath=/d3/jlib
wrapper.classpath=/d3/jlib/javax-ssl-1_1.jar
wrapper.classpath=/d3/jlib/jssl-1_1.jar
wrapper.classpath=/d3/jlib/netcfg.jar
wrapper.classpath=/d3/jlib/dbui-2_1_2.jar
#wrapper.classpath=/d3/lib/aurora_client.jar
#wrapper.classpath=/d3/lib/xmlparserv2.jar
wrapper.classpath=/d3/network/jlib/netmgrm.jar
wrapper.classpath=/d3/network/jlib/netmgr.jar
wrapper.classpath=/d3/network/tools
wrapper.classpath=/d3/jlib/kodiak-1_2_1.jar
wrapper.classpath=/d3/sysman/jlib/netchart360.jar
wrapper.classpath=/d3/jlib/pfjbean.jar
wrapper.env=SHLIB_PATH=/d3/lib32
wrapper.env=LIBPATH=/d3/lib32
wrapper.classpath=/d3/ultrasearch/lib/isearch_midtier.jar
wrapper.classpath=/d3/ultrasearch/lib/isearch_query.jar
wrapper.classpath=/d3/ultrasearch/lib/jgl3.1.0.jar
wrapper.classpath=/d3/lib/mail.jar
wrapper.classpath=/d3/lib/activation.jar
wrapper.classpath=/d3/ultrasearch/jsp/admin/config
# Additions for iFS
## DO NOT REMOVE OR ALTER THE FOLLOWING LINE ....
# iFS true
# Uncomment if you want to use the same Jserv as other
applications
wrapper.classpath=/d3/9ifs/custom_classes
wrapper.classpath=/d3/9ifs/settings
wrapper.classpath=/d3/9ifs/lib/adk.jar
wrapper.classpath=/d3/9ifs/lib/email.jar
wrapper.classpath=/d3/9ifs/lib/http.jar
wrapper.classpath=/d3/9ifs/lib/release.jar
wrapper.classpath=/d3/9ifs/lib/repos.jar
wrapper.classpath=/d3/9ifs/lib/utils.jar
wrapper.classpath=/d3/9ifs/lib/webui.jar
wrapper.classpath=/d3/9ifs/lib/provider.jar
wrapper.classpath=/d3/jlib/javax-ssl-1_2.jar
wrapper.classpath=/d3/jlib/jssl-1_2.jar
wrapper.env=ORACLE_HOME=/d3
wrapper.env=ORACLE_SID=cmpdb
wrapper.env=LD_LIBRARY_PATH=/d3/lib:/d3/ctx/lib:/d3/lib32
wrapper.env=NLS_LANG=.US7ASCII
## Additions for the iFS zone
# Uncomment if you want to use the same Jserv as other
applications
zones=ifs
ifs.properties=/d3/Apache/Jserv/etc/ifs.properties
# End iFS section

About your home page; Manually set up Firefox with the window(s) and tab(s)
the way you want them to be. Then;
'''''Firefox Options > General > Homepage'''''.
Press the button labeled ''''Use Current'''.'
=====================================
Open a new window or tab. In the address bar, type '''''about:config'''''.
If a warning screen comes up, press the '''''Be Careful''''' button.
This is where Firefox finds information it needs to run.
At the top of the screen is a search bar. Enter '''''browser.newtab.url'''''
and press enter. '''''browser.newtab.url'''''
tells Firefox what to show when a new tab is opened.
If you want, right click and select '''''Modify'''''. You can change the
setting to; about:home (Firefox default home page), 
about:newtab (shows the sites most visited), 
about:blank (a blank page), 
or you can enter any web page you want. 
The same instructions are used for the new window setting, listed as
'''''browser.startup.homepage'''''.

I cannot sync Ical on my iMac with my professional calendar (outlook web access). and I don't understand why it doesn't work since I have already made it with my iPhone. Help

Hello,
I bought an iMac few days ago. I would like to sync ical on my iMac with my professional calendar I use in my company (from outlook web access).
I was easy to manage it on my iPhone (I just add a new "exchange" mail account and ask for a calendar sync only) and it worked very quickly.
But I cannot do it with the iMac, and I don't undersatnd why?
the domain is is used for my iPhone is the following :
owa.companyname.com
I tried all the solutions I found in this forum but it doesn't work.
Many thanks in advancefor your help.
Matt

Does it have to be an applet?
If you want the same behaviour as in the code with traffic lights, change
class MortgageApplet extends JApplet implements ActionListener {
to
class MortgageApplet extends JFrame implements ActionListener {
and change
public void init() {
to
public MortgageApplet() {

Direct Access Server 2012 R2 Single NIC DNS problem with 8.1 Enterprise

Dear helpers,
I am beginning to rip my hair over the following problem and I am asking for some guidance:
I have setup DA on a server 2012 R2 with the simple wizard using one NIC. I have opened up port 443 to my DA Server and operations status is showing green on everything. I have used Djoin to join a remote win 8.1 enterprise client to our domain and
setup DA. I can see that my tunnel is established and the client shows up as an IPHTTPS client on my server:
Role : client
URL : https://vpn.ourdomain.com:443/IPHTTPS
Last Error Code : 0x0
Interface Status : IPHTTPS interface active
Connection status on client is stuck in connecting and the eventlog on client gives me following error:
The system failed to register host (A or AAAA) resource records (RRs) for network adapter
with settings:
 Adapter Name : {424F50B4-BF1A-4D96-81FA-7D7436A99F07}
 Host Name : TEST
 Primary Domain Suffix : ourdomain.com
 DNS server list :
 172.16.8.1
 Sent update to server : <?>
 IP Address(es) :
 172.16.8.110
The reason the system could not register these RRs was because the update request it sent to the DNS server timed out. The most likely cause of this is that the DNS server authoritative for the name it was attempting to register or update is not running at
this time.
I understand why this is failing because it seems like it is contacting the local DNS to register and that's wrong.
Get-DaConnectionStatus gives me the following:
Status : Error
Substatus : CouldNotContactDirectAccessServer
I can ping the name on the DA server and also the IPv6 address, I can also do nslookup if i set the server used to my internal DNS-servers IPv6 address(DNS and DA server = same machine). My DA Client GPO is being applied to the client and i get an NRPT table
looking as follows:
Settings for DirectAccess-NLS.ourdomain.com
DirectAccess (Certification Authority) :
DirectAccess (IPsec) : disabled
DirectAccess (DNS Servers) :
DirectAccess (Proxy Settings) : Use default browser settings
Settings for vpn.ourdomain.com
DirectAccess (Certification Authority) :
DirectAccess (IPsec) : disabled
DirectAccess (DNS Servers) :
DirectAccess (Proxy Settings) : Use default browser settings
Settings for .ourdomain.com
DirectAccess (Certification Authority) :
DirectAccess (IPsec) : disabled
DirectAccess (DNS Servers) : fd1f:6801:cc14:3333::1
DirectAccess (Proxy Settings) : Bypass proxy
I cannot reach any internal resources by name or IPv4 address except the DA server.
I will gladly provide more info if needed
Please help!
//Cris

Hi,
Thanks for your reply.
Firstly, computer certificates are necessary for DirectAccess.
In addition, it is no need to assign an IPv6 address on all the servers. In Windows server 2012/R2, the
Built-in NAT64 and DNS64 support for accessing IPv4-only resources.
If you select Configure DirectAccess Clients with DNS client suffix search list and add additional suffixes to the list,
you can search for short, unqualified computer names in more than one specified DNS domain.
For more detailed information about DNS suffix search list, please refer to the link below:
Step 2: Configure the DirectAccess Server
Best regards,
Susie

Cannot view OWA email - after upgrade to Firefox 5.0, Outlook Web Access displays ASCII characters (garbage) in message body. Same issue with multiple servers.

Email body of HTML or RTF messages are rendered in ASCII characters after upgrading to Firefox 5 when viewing email in MS Outlook Web Access (OWA) light from MS Exchange 2007 servers. Issue is repeatable with two entirely different Exchange systems.
Text email renders OK. Work around is to forward email (in use MS-IE).

You are welcome. I'm glad you got it back up.
(1) You say you did the symbolic link. I will assume this is set correctly; it's very important that it is.
(2) I don't know what you mean by "Been feeding the [email protected] for several weeks now, 700 emails each day at least." After the initial training period, SpamAssassin doesn't learn from mail it has already processed correctly. At this point, you only need to teach SpamAssassin when it is wrong. [email protected] should only be getting spam that is being passed as clean. Likewise, [email protected] should only be getting legitimate mail that is being flagged as junk. You are redirecting mail to both [email protected] and [email protected] ... right? SpamAssassin needs both.
(3) Next, as I said before, you need to implement those "Frontline spam defense for Mac OS X Server." Once you have that done and issue "postfix reload" you can look at your SMTP log in Server Admin and watch as Postfix blocks one piece of junk mail after another. It's kind of cool.
(4) Add some SARE rules:
Visit http://www.rulesemporium.com/rules.htm and download the following rules:
70sareadult.cf
70saregenlsubj0.cf
70sareheader0.cf
70sarehtml0.cf
70sareobfu0.cf
70sareoem.cf
70sarespoof.cf
70sarestocks.cf
70sareunsub.cf
72sare_redirectpost
Visit http://www.rulesemporium.com/other-rules.htm and download the following rules:
backhair.cf
bogus-virus-warnings.cf
chickenpox.cf
weeds.cf
Copy these rules to /etc/mail/spamassassin/
Then stop and restart mail services.
There are other things you can do, and you'll find differing opinions about such things. In general, I think implementing the "Frontline spam defense for Mac OS X Server" and adding the SARE rules will help a lot. Good luck!

Web access grinds to a Halt with DNS

Similar Messages

Maybe you are looking for